Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File:                     B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier:          4DbHrCpqGMHO5nsToRc9ILHOyE8lN2SHQwkRjkKM5jI=
Subject key identifier:   97:F1:48:3E:CD:86:A3:63:E3:54:20:79:7E:66:26:97:87:48:FD:25
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0BE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number:          0BBF
Signing time:             Tue 22 Jul 2025 19:10:50 +0000
Manifest this update:     Tue 22 Jul 2025 19:10:50 +0000
Manifest next update:     Tue 29 Jul 2025 19:10:50 +0000
Files and hashes:         1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: DO2FKLXbn5s42+wvLmyaZ4FKfRmBQH6MYZz+zTYZeFA=)
                          2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: PsugJWGM5ONkTT/QKBNZcGT+Fx1Ca8/gO0JC72FJj/U=)
                          3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=)
                          4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=)
                          5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 19:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3043 (0xbe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Jul 22 19:10:50 2025 GMT
            Not After : Jul 29 19:10:50 2025 GMT
        Subject: CN=687fe23a-9f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:62:a7:ea:d2:d5:27:00:43:9c:8b:ad:2b:
                    fc:95:cb:4d:a2:08:ef:c1:c6:95:98:96:bc:cc:82:
                    1e:7e:5c:55:04:3b:21:01:ef:31:79:1f:71:be:be:
                    14:38:23:54:d4:5c:0d:4e:9c:b8:67:ad:26:f3:c9:
                    b1:ee:68:f4:79:d0:28:76:66:af:27:f8:97:86:b0:
                    75:56:d3:73:34:43:8a:ce:89:93:b8:5a:05:e2:71:
                    74:25:b9:c9:11:86:0f:bb:e4:21:f2:dd:57:86:65:
                    36:39:d1:db:ad:bf:32:1d:cf:bb:15:4d:59:97:0c:
                    bb:41:54:6b:fe:5f:b0:2d:82:84:0a:06:90:60:d2:
                    87:92:11:6b:d4:37:12:8c:26:a9:63:78:72:36:6c:
                    dd:51:aa:e2:5b:6e:60:da:c8:8f:a1:d7:fa:27:cc:
                    6e:9f:39:90:ff:76:ad:40:4c:8a:20:7c:32:07:a2:
                    04:f9:4c:3f:bc:6d:2d:50:46:fd:4e:b2:89:61:cf:
                    81:3d:7c:ba:19:dc:ec:3a:5d:19:59:da:0d:ba:d4:
                    cd:ad:9e:de:ba:17:13:55:7c:81:ff:b9:71:01:e0:
                    a3:da:7c:9f:48:9f:0c:7d:18:98:fb:59:3d:b3:b0:
                    3a:df:18:47:08:a9:0a:9f:a8:05:64:ab:1d:2e:76:
                    56:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F1:48:3E:CD:86:A3:63:E3:54:20:79:7E:66:26:97:87:48:FD:25
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:df:5d:4f:79:ec:3b:bf:96:b5:52:58:e7:21:6e:a9:b7:2b:
         b8:f8:6d:4f:3c:ad:32:29:8f:35:b8:03:d9:b5:27:8e:89:b6:
         6c:5a:25:8e:e2:d8:02:b4:ef:da:4a:10:21:fc:c9:31:56:1f:
         73:1a:36:20:5e:f6:2b:d7:0f:20:a2:92:38:ef:8d:94:4f:24:
         f7:2e:22:2c:26:0e:c8:6e:13:d7:a7:97:ca:d5:06:22:cb:5c:
         3a:44:48:27:68:8e:6e:07:b2:29:cb:8d:f2:f9:1c:52:a3:79:
         2f:82:fd:f9:8a:76:e8:0d:7e:1d:6e:b0:b3:36:d7:c4:99:6f:
         dc:91:77:30:84:c2:c3:06:ba:07:f3:bd:b5:e4:a1:94:7c:6a:
         5b:80:44:84:96:52:18:d9:32:ad:f6:53:5f:02:82:91:57:fc:
         f8:89:54:ab:80:37:09:45:c6:0e:ed:61:bf:22:54:24:83:f6:
         62:7a:5a:20:39:7c:d7:09:d5:40:5a:84:0f:e5:66:c3:e7:4d:
         7f:27:1e:54:35:99:52:3e:a4:b0:16:bd:48:d3:8c:89:aa:fd:
         ee:d1:53:fd:37:fc:04:b2:de:10:18:f8:3f:c4:2c:a0:42:81:
         9b:09:4c:81:1b:75:b8:34:84:3e:d6:e4:45:ef:a9:f7:59:e8:
         24:97:c8:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD
QTE2RDlDRDUwHhcNMjUwNzIyMTkxMDUwWhcNMjUwNzI5MTkxMDUwWjAYMRYwFAYD
VQQDEw02ODdmZTIzYS05ZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4xip+rS1ScAQ5yLrSv8lctNogjvwcaVmJa8zIIeflxVBDshAe8xeR9xvr4U
OCNU1FwNTpy4Z60m88mx7mj0edAodmavJ/iXhrB1VtNzNEOKzomTuFoF4nF0JbnJ
EYYPu+Qh8t1XhmU2OdHbrb8yHc+7FU1Zlwy7QVRr/l+wLYKECgaQYNKHkhFr1DcS
jCapY3hyNmzdUariW25g2siPodf6J8xunzmQ/3atQEyKIHwyB6IE+Uw/vG0tUEb9
TrKJYc+BPXy6GdzsOl0ZWdoNutTNrZ7euhcTVXyB/7lxAeCj2nyfSJ8MfRiY+1k9
s7A63xhHCKkKn6gFZKsdLnZWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfxSD7N
hqNj41QgeX5mJpeHSP0lMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2
MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs
cTAtYjlOcFN0dFhLRnRuTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAs311Peew7v5a1UljnIW6ptyu4+G1PPK0yKY81uAPZtSeOibZsWiWO
4tgCtO/aShAh/MkxVh9zGjYgXvYr1w8gopI4742UTyT3LiIsJg7IbhPXp5fK1QYi
y1w6REgnaI5uB7Ipy43y+RxSo3kvgv35inboDX4dbrCzNtfEmW/ckXcwhMLDBroH
87215KGUfGpbgESEllIY2TKt9lNfAoKRV/z4iVSrgDcJRcYO7WG/IlQkg/Zielog
OXzXCdVAWoQP5WbD501/Jx5UNZlSPqSwFr1I04yJqv3u0VP9N/wEst4QGPg/xCyg
QoGbCUyBG3W4NIQ+1uRF76n3Wegkl8ip
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:06 2025 by rpki-client